c966d1b1882f2bc49f7ae03b508cf6c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c966d1b1882f2bc49f7ae03b508cf6c5_JaffaCakes118
Size

769KB
MD5

c966d1b1882f2bc49f7ae03b508cf6c5
SHA1

2a7085b36a558923a9a0d4130e3c1c2f99bcf732
SHA256

0c1a62026c3f33a550b3ce3245a59af5b9c9fd1c777018e4dcdb118c390c540f
SHA512

f6db379179c47e3d6919102741a4db115bfe5bb52e7c8be1ee319f9652dae1cdd0e6985eafa6ab34791fb3e912da9188cf1e3fc39630e98399a3b68ab8d82491
SSDEEP

12288:fVkFIF6F/CNXOLwH2bMAAoVMd45lyMN7h6dO:f++6INOLm2ZlyMf6dO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c966d1b1882f2bc49f7ae03b508cf6c5_JaffaCakes118

Files

c966d1b1882f2bc49f7ae03b508cf6c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.9y4zu4
Size: 1KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jfjiki
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: - Virtual size: 3.0MB

.rbss
Size: - Virtual size: 444KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.null
Size: 431KB - Virtual size: 432KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE